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(54) System and method of detecting unauthorised use of identifiers for computer access. 

(57) A system detects unauthorized use of an 
identifier in a communication system which 
includes at least one terminal (2) coupled to a 
communication center (1) via a communication 
network (3, 4). The system includes a first part 
(1b) provided in the communication center (1) 
for managing a password and a previous caller 
telephone number in correspondence with each 
identifier, and a second part (1a) provided in the 
communication center (1) for sending a warn- 
ing message to the terminal (2) if an access 
identifier and an access password input from 
the terminal from which an access request is 
made respectively match one of the identifiers 
and a corresponding password managed by. the 
first means but a present caller telephone num- 
ber from which the access request is made is 
different from the previous caller telephone 
number. 
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BACKGROUND OF THE INVENTION 

The present invention generally relates, to sys- 
tems and methods of detecting unauthorized use of 
identifiers, and more particularly to a system and a 
method which enable simple detection of unautho- 
rized use of an identifier so as to improve the system 
security. 

Communications using personal computers have 
become popular, and such communications are no 
longer limited to the computer industry but are also 
used at homes. For this reason, there are demands 
to improve the security of the system. The manage- 
ment of the identifiers (hereinafter simply referred to 
as IDs^which are required to make an access to the 
system is particularly important, and there are de- 
mands to prevent unauthorized use of the IDs and to 
effectively detect the unauthorized use of the IDs. 

FIG.1 shows an example of a conventional sys- 
tem for detecting unauthorized use of the ID. In FIG.1 , 
a personal terminal 2 is coupled to a communication 
center 1 via a public communication network 4 and a 
switching system 3. The personal terminal 2 is provid- 
ed with a communication function and may be a per- 
sonal computer, a word processor and the like. On the 
other hand, the communication center 1 includes an 
unauthorized use checking program 1A shown in 
FIG. 2, and a management table 1B having a format 
shown in FIG. 3. 

The communication center 1 carries out a regis- 
tration service in response to an access request from 
the personal terminal 2, and an ID and a password 
are stored in the management table 1B in the format 
shown in FIG. 3. The management table 1 B stores the 
previous access date and time in addition to the ID 
and the password. 

Accordingly, as shown in FIG. 2, a step 100 
searches for an ID in the management table 1B which 
is identical to the ID input with the access request 
(hereinafter simply referred to as the access ID), and 
a step 102 decides whether or not the access ID 
matches an ID in the management table 1 B. If the de- 
cision result in the step 101 is YES, a step 102 de- 
cides whether or not the password input with the ac- 
cess request (hereinafter simply referred to as the ac- 
cess password) matches the password stored in the 
management table 1B in correspondence with the 
above ID which matches the access ID. 

If the decision result in the step 101 or 102 is NO, 
it is regarded that the user making the access request 
is a non-registered user or an unauthorized user, and 
a step 103 rejects the access request 

On the other hand, if the decision result in the 
step 102 is YES, a step 104 carries out the commu- 
nication process. 

Conventionally, when the access ends, the com- 
munication center 1 refers to a timer (not shown) and 
records the access date and time into the manage- 



ment table 1B within a memory (not shown). There- 
after, if the decision results in the steps 101 and 102 
are both YES for a subsequent access request, the 
communication center 1 refers to the management ta- 

5 ble 1 B and notifies the previous access date and time 
to the personal terminal 2. 

Accordingly, when the authorized user makes an 
access to the communication center 1 from the per- 
sonal terminal 2, it is possible to recognize whether 

10 or not an unauthorized use of this user's ID has been 
made by checking the previous access date and time 
which are received from the communication center 1 
at the start of the communication process. However, 
the communication center 1 notifies the personal ter- 

75 minal 2 of only the previous access date and time. For 
this reason, there were problems in that it is impos- 
sible to specify the unauthorized user who has made 
the unauthorized access, and that the information 
supplied to the authorized user is insufficient to more 

20 completely check the unauthorized use of the ID. 

SUMMARY OF THE INVENTION 

Accordingly, it is a general object of the present 
25 invention to provide a novel and useful system and 
method of preventing unauthorized use of identifier, 
in which the problems described above are eliminat- 
ed. 

Another and more specific object of the present 

30 invention is to provide a system for detecting unau- 
thorized use of an identifier in a communication sys- 
tem which includes at least one terminal coupled to a 
communication center via a communication network, 
comprising first means, provided in the communica- 

35 tion center, for managing a password and a previous 
caller telephone number in correspondence with 
each identifier, and second means, provided in the 
communication center, for sending a warning mes- 
sage to the terminal if an access identifier and an ac- 

40 cess password input from the terminal from which an 
access request is made respectively match one of the 
identifiers and a corresponding password managed 
by the first means but a present caller telephone num- 
ber from which the access request is made is different 

45 from the previous caller telephone number. According 
to the system of the present invention, it is possible 
to notify the terminal user if the present caller tele- 
phone number is different from the previous caller tel- 
ephone number. Thus, an authorized use of the iden- 

50 tif ier can be detected by the terminal user if the ter- 
minal user did not make the previous access from a 
different.telephone number. Furthermore, if the pre- 
vious telephone number is notified to the terminal 
user, it is possible to locate the unauthorized user 

55 from the previous telephone number. 

Still another object of the present invention is to 
provide the system described above wherein the first 
means further manages second passwords in corre- 
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spondence with each identifier, and the second 
means requests input of a second access password 
to the terminal when sending the warning message, 
and rejects the access request if the second access 
password input from the terminal is different from a 
corresponding second password managed by the 
first means. According to the system of the present in- 
vention, it is possible to reject the access request if 
the second access password is incorrect This ac- 
cess request rejecting function is particularly useful 
when the user makes the. access request from differ- 
ent telephone numbers. 

A further object of the present invention is to pro- 
vide a method of detecting unauthorized use of an 
identifier in a communication system which includes 
at least one terminal coupled to a communication 
center via a communication network, comprising the 
steps of (a) managing a password and a previous call- 
er telephone number in correspondence with each 
identifier, and (b) sending a warning message to the 
terminal if an access identifier and an access pass- 
word input from the terminal from which an access re- 
quest is made respectively match one of the identifi- 
ers and a corresponding password managed by the 
step (a) but a present caller telephone number from 
which the access request is made is different from the 
previous caller telephone number. According to the 
method of the present invention, it is possible to no- 
tify the terminal user if the present caller telephone 
number is different from the previous caller telephone 
number. Thus, an authorized use of the identifier can 
be detected by the terminal user if the terminal user 
did not make the previous access from a different tel- 
ephone number. Furthermore, if the previous tele- 
phone number is notified to the terminal user, it is 
possible to locate the unauthorized user from the pre- 
vious telephone number. 

Another object of the present invention is to pro- 
vide the method described above wherein the step 
(a) further manages second passwords in correspon- 
dence with each identifier, and the step (b) requests 
input of a second access password to the terminal 
when sending the warning message, and rejects the 
access request if the second access password input 
from the terminal is different from a corresponding 
second password managed by the step (a). According 
to the method of the present invention, it is possible 
to reject the access request if the second access 
password is incorrect. This access request rejecting 
function is particularly useful when the user makes 
the access request from different telephone numbers. 

Other objects and further features of the present 
invention will be apparent from the following detailed 
description when read in conjunction with the accom- 
panying drawings. 



BRIEF DESCRIPTION OF THE DRAWINGS 

FIG.1 is a system block diagram showing an ex- 
ample of a conventional system for detecting un- 
5 authorized use of ID; 

FIG. 2 is a flow chart for explaining an unautho- 
rized use checking program of a communication 
center shown in FIG.1; 

FIG. 3 shows an example of the format of a man- 
to agement table of the communication center 
shown in FIG.1; 

FIG. 4 is a system block diagram showing a first 
embodiment of a system for detecting unautho- 
rized use of ID according to the present invention; 
15 FIG. 5 shows an embodiment of the format of a 

management table of a communication center in 
the first embodiment; 

FIGS. 6 and 7 respectively are flow charts for ex- 
plaining the operation of the first embodiment 
20 FIG. 8 shows an embodiment of the format of a 

management table of a communication center in 
a second embodiment of the system for detecting 
unauthorized use of ID according to the present 
invention; and 

25 FiGS. 9 and 10 respectively are flow charts for ex- 

plaining the operation of the second embodi- 
ment. 

DESCRIPTION OF THE PREFERRED 
30 EMBODIMENTS 

FIG.4 shows a first embodiment of a system for 
detecting unauthorized use of ID according to the 
present invention. In FIG.4, those parts which are the 

35 same as those corresponding parts in FIG.1 are des- 
ignated by the same reference numerals, and a de- 
scription thereof will be omitted. FIG. 5 shows an em- 
bodiment of the format of a management table 1b of 
the communication center 1 in the first embodiment. 

40 FIGS. 6 and 7 respectively are flow charts for explain- 
ing the operation of the first embodiment, that is. a 
first embodiment of a method of detecting unautho- 
rized use of ID according to the present invention. 
In this embodiment of the system, the password. 

45 the previous access date and time and the previous 
caller telephone number are recorded in the manage- 
ment table 1b of the communication center 1 in cor- 
respondence with the access ID of an access request 
a made from the personal terminal 2. When a next ac- 

50 cess request a is made, a recognition b is made of the 
present caller telephone number, and a comparison is 
made between the present caller telephone number 
and the previous caller telephone number in an unau- 
thorized use checking program 1a of the communica- 

55 tion center 1 based on a notification c of the present 
caller telephone number. If the two compared tele- 
phone numbers do not match, a warning d is made to 
the personal terminal 2. When making this warning d. 



3 NS DOC ID: <EP_C541 435A1 _l_> 



EP 0 541 435 A1 



the previous caller telephone number may be trans- 
mitted to the personal terminal 2 together with the 
warning. 

The communication center 1 has a known con- 
struction including a processor and a memory or stor- 
age coupled thereto. The processor carries out the 
unauthorized use checking program 1a which is stor- 
ed in the memory. This memory also stores the man- 
agement table 1 b. In FIG. 4, only the unauthorized use 
checking program 1a and the management table 1b 
are shown within the communication center 1 for the 
sake of convenience. 

As shown in FIG.6, a step 110 searches for an ID 
in the management table 1b which is identical to the 
access ID input with the access request a by using 
the access ID as the key. A step 111 decides whether 
or not the access ID matches an ID in the manage- 
ment table 1b. If the decision result in the step 111 is 
YES, a step 112 decides whether or not the access 
password input with the access request a matches 
the password stored in the management table 1b in 
correspondence with the above ID which matches 
the access ID. 

If the decision result in the step 111 or 112 is NO, 
it is regarded that the user making the access request 
is a non-registered user or an unauthorized user, and 
a step 117 sets an access reject flag ARF. The proc- 
ess advances to a step 120 shown in FIG. 7 after the 
step 117. 

On the other hand, if the decision result in the 
step 112 is YES, a step 113 decides whether or not a 
previous caller telephone number is stored in column 
of the management table 1 b corresponding to the ac- 
cess ID. For example, if the number stored in this col- 
umn of the management table 1b consists of all M 0 w s, 
for example, the decision result in the step 113 is NO 
and a step 115 registers the present caller telephone 
number in the management table 1b. For example, 
the present caller telephone number is "1 234567890" 
for the access ID "ABCDEF" as shown in FIG. 5. Then, 
a step 116 updates the file of the management table 
1b in the communication center 1, and the process 
advances to the step 120 shown in FIG. 7. 

On the other hand, if the decision result in the 
step 113 is YES, it means that an access was previ- 
ously made using the same access ID. In this case, 
a step 114 decides whether or not the present caller 
telephone number matches the previous caller tele- 
phone number stored in the management table 1 b. If 
the decision result in the step 114 is YES, the present 
access request a is regarded as a normal access and 
the process advances to the step 120 shown in FIG. 7. 
But if the decision result in the step 114 is NO, a step 
118 sets a warning flag WF before advancing to the 
step 120 shown in FIG. 7. 

When the warning flag WF is set, it means that 
the present caller telephone number is different from 
the previous caller telephone number. If the user mak- 



ing the present access request a is an authorized 
user, this user can recognize whether or not an unau- 
thorized use of his ID has been made. 

The step 120 shown in FIG.7 decides whether or 

5 not the access reject flag ARF is set. If the decision 
result in the step 120 is YES, a step 122 rejects the 
access request a. On the other hand, if the decision 
result in the step 120 is NO, a step 121 decides 
whether or not the warning flag WF is set. If the de- 

10 cision result in the step 121 is NO, a step 104 carries 
out the communication process. 

If the decision result in the step 1 21 is YES. a step 
123 sends a warning message to the personal termi- 
nal 2, and a step 104 sends the previous access date 

15 and time to the personal terminal 2 at the start of the 
communication process. Of course, the step 104 may 
also send the previous caller telephone number to the 
personal terminal 2. The information received from 
the communication center 1 is displayed on a display 

20 of the personal terminal 2, for example. 

The authorized user of the personal terminal 2 
can recognize from the displayed previous access 
date and time whether or not the unauthorized use of 
his ID has occurred, because the authorized user 

25 would know the previous access date and time. In ad- 
dition, if the previous caller telephone number is dis- 
played, it will facilitate the authorized user recognize 
whether or not the unauthorized use of his ID has oc- 
curred. Further, the authorized user will be able to 

30 know from the previous caller telephone number the 
telephone number of the unauthorized user who has 
made the unauthorized access to the system. 

In this embodiment, the previous access date 
and time are sent to the personal terminal after the 

35 warning message. However, it is possible to send only 
the warning message, or to send the warning mes- 
sage and the previous access date and time or the 
previous caller telephone number. The important 
thing is to notify the authorized user of the warning 

40 message which indicates that the present caller tele- 
phone number and the previous caller telephone 
number do not match. 

Next, a description will be given of a second em- 
bodiment of the system for detecting unauthorized 

45 use of ID according to the present invention. The 
block system of this embodiment is identical to that 
shown in FIG. 4. FIG. 8 shows an embodiment of the 
format of a management table 1b of the communica- 
tion center 1 in the second embodiment. FIGS. 9 and 

so 10 respectively are flow charts for explaining the op- 
eration of the second embodiment, that is, a second 
embodiment of the method of detecting unauthorized 
use of ID according to the present invention. In 
FIGS. 9 and 10, those steps which are the same as 

55 those corresponding steps in FIGS. 6 and 7 are des- 
ignated by the same reference numerals, and a de- 
scription thereof will be omitted. 

In this embodiment of the system, two passwords 
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are used, so as to further improve the system security 
compared to the first embodiment. 

As shown in FIG.9, a step 301 decides whether 
or not a second password request flag SPWRF is set. 
Initially, prior to checking the access ID and the first 
password in the steps 111 and 112, the second pass- 
word request flag is reset. Hence, the decision result 
in the step 301 is NO and the steps 111 through 118 
described above are carried out. 

On the other hand, after the step 118. the deci- 
sion result in the step 121 shown in FIG. 10 is YES, 
and a step 401 is carried out. The step 401 sends the 
warning message to the personal terminal 2 as in the 
case of the step 123 of the first embodiment, and in 
addition, sends a message requesting the user of the 
personal terminal 2 to input a second password. 
Then, a step 402 sets the second password request 
flag SPWRF, and the process advances to the step 
104. 

When the user of the personal terminal 2 is noti- 
fied of the warning message and inputs the second 
password in response to the request from the com- 
munication center 1, the decision result in the step 
301 becomes YES, and a step 302 decides whether 
or not the input second password matches a second 
password which is stored in the management table 1 b 
in correspondence with the access ID. In this case, 
the management table 1b stores first and second 
passwords PW1 and PW2 in correspondence with 
each access ID as shown in FIG. 8. Otherwise, the 
management table 1b shown in FIG. 8 is basically the 
same as that shown in FIG. 5. 

If the decision result in the step 302 is NO, a step 
303 sets the access reject flag ARF. Further, a step 
303 keeps a log of the information related to this re- 
jected access request. The information kept in the log 
may include the access ID. the caller telephone num- 
ber of the rejected access request, the date and time 
of the rejected access request and the like. By keep- 
ing such information in the log of the communication 
center 1,. it is possible to confirm unauthorized ac- 
cesses reported from authorized users. In addition, 
even if the step 104 in FIG. 10 does not send the pre- 
vious caller telephone number to the personal termi- 
nal 2 for privacy reasons and to prevent an unautho- 
rized user from knowing the telephone number of the 
authorized user, the unauthorized user can still be lo- 
cated from the previous caller telephone number 
which is in the log at the communication center 1. 
Therefore, the system security is improved by the use 
of two passwords and the log which is stored in the 
communication center 1. This log, the unauthorized 
use checking program 1a and the management table 
1 b may be stored in the memory or storage within the 
communication center 1 . 

On the other hand, if the decision result in the 
step 302 is YES in FIG.9, it is regarded that the pres- 
ent caller from the personal terminal 2 is the autho- 



rized user. Hence, in this case, a step 310 resets the 
warning flag WF and a step 311 resets the second 
password request flag SPWRF before advancing to 
the step 120 shown in FIG.10. 

5 In the present invention, the communication cen- 

ter 1 needs to know the telephone number of the call- 
er who makes the access request from the personal 
terminal 2. For example, if a telephone switching sys- 
tem employing the known multiple frequency signal 

10 (MF) system or an electronic switching system em- 
ploying the inter-office communication system (for 
example, the system using the common channel sig- 
naling, No.7 signaling system specifications of the 
CCITT) is used, the caller telephone number can be 

15 recognized at the called side switching system 3 by 
transferring the caller telephone number from the 
calling side switching system to the called side 
switching system 3 based on the request from the 
called side switching system 3 using the multiple fre- 

20 quency signal or the common channel signaling. 
Hence, the communication center 1 can easily know 
the caller telephone number by requesting the caller 
telephone number of the personal terminal 2 from 
which the access request is made to the switching 

25 system 3 which is connected to the communication 
center 1. 

However, in the case where the public communi- 
cation network 4 shown in FIG.4 is a telephone net- 
work which does not have the above described func- 

30 tion of receiving the caller telephone number, the 
communication center 1 cannot know the caller tele- 
phone number from the switching system 3. But in 
this case, it is possible to send the caller telephone 
number together with the access request when mak- 

35 ing the access from the personal terminal 2. The 
method of recognizing the caller telephone number at 
the communication center 1 is not limited to a specific 
method, and any method may be employed as long 
as the caller telephone number can be recognized at 

40 the communication center 1. 

In the described embodiments, it is assumed for 
the sake of convenience that a communication is 
made between two personal terminals 2 via the com- 
munication center 1. However, the present invention 

45 is not limited to the communication between personal 
computers, and is applicable to any kind of communi- 
cation which is made between two terminals having 
a communication function via a communication cen- 
ter which controls the communication, where the ter- 

so minals are connected to a communication network 
having the function of transferring the caller tele- 
phone number from the caller side to the called side. 
Moreover, the communication may be made between 
one terminal 2 and the communication center 1 if this 

55 one terminal 2 is used to simply make access to a 
data stored in the communication center 1 such as a 
database. 



SNSOOCiO: <EP_0541435A1_I_> 



BP 0 541 435 A1 



10 



Claims 

1. A system for detecting unauthorized use of an 
identifier in a communication system which in- 
cludes at least one terminal (2) coupled to a com- 
munication center (1) via a communication net- 
work (3, 4), characterized in that said system 
comprises: first means (1 b), provided in the com- 
munication center (1), for managing a password 
and a previous caller telephone number in corre- 
spondence with each identifier, and second 
means (1a), provided in the communication cen- 
ter (1), for sending a warning message to the ter- 
minal (2) if an access identifier and an access 
password input from the terminal from which an 
access request is made respectively match one 
of the identifiers and a corresponding password 
managed by said first means but a present caller 
telephone number from which the access request 
is made is different from the previous caller tele- 
phone number. 

2. The system as claimed in claim 1, characterized 
in that said second means (1a) permits the ac- 
cess request made from the terminal (2) if the ac- 
cess identifier and the access password input 
from the terminal match one of the identifiers and 
the corresponding password managed by said 
first means (1b). 

3. The system as claimed in claim 1 or 2, character- 
ized in that said first means (1 b) further manages 
an access date and time of each access, and said 
second means (1a) sends at least one of the pre- 
vious caller telephone number and the access 
date and time to the terminal (2) when sending 
the warning message. 

4/ The system as claimed in any of claims 1 to 3, 
characterized in that said second means (1a) rec- 
ognizes the present caller telephone number 
from which the access request is made based on 
a telephone number which is received from the 
terminal (2) together with the access request. 

5, The system as claimed in any of claims 1 to 3, 
characterized in that the communication network 
includes means for notifying a called end of a tel- 
ephone number of a calling end, and said second 
means (1a) recognizes the present caller tele- 
phone number from which the access request is 
made based a notification received from the 
communication network. 

6. The system as claimed in claim 1, characterized 
in that said first means (1 b) further manages sec- 
ond passwords in correspondence with each 
identifier, and said second means (1a) requests 



input of a second access password to the termi- 
nal (2) when sending the warning message, and 
rejects the access request if the second access 
password input from the terminal is different from 
5 a corresponding second password managed by 

said first means. 

7. The system as claimed in claim 6, characterized 
in that said first means (1b) further manages an 

10 access date and time of each access, and said 

second means (1a) sends at least one of the pre- 
vious caller telephone number and the access 
date and time to the terminal (2) when sending 
the warning message. 

75 

8. The system as claimed in claim 6 or 7, character- 
ized in that said second means (1a) recognizes 
the present caller telephone number from which 
the access request is made based on a telephone 

20 number which is received from the terminal (2) to- 

gether with the access request. 

9. The system as claimed in claim 6 or 7, character- 
ized in that the communication network includes 

25 means for notifying a called end of a telephone 

number of a calling end. and said second means 
(1a) recognizes the present caller telephone 
number from which the access request is made 
based a notification received from the communi- 

30 cation network. 

10. The system as claimed in any of claims 6 to 9, 
characterized in that the communication center 
(1) is further provided with third means for keep- 

35 ing a log of information related to the access re- 

quest which is rejected by said second means 
(1a). 

11. The system as claimed in claim 10, characterized 
40 in that said third means stores in the log informa- 
tion including the access identifier used for the 
rejected access request, the caller telephone 
number of the rejected access request, and the 
date and time of the rejected access request. 

45 

12. A method of detecting unauthorized use of an 
identifier in a communication system which in- 
cludes at least one terminal (2) coupled to a com- 
munication center (1) via a communication net- 
so work (2, 4), said method comprising the steps of: 

(a) managing a password and a previous call- 
er telephone number in correspondence with 
each identifier and 

(b) sending a warning message to the terrhi- 
55 nal (2) if an access identifier and an access 

password input from the terminal from which 
an access request is made respectively match 
one of the identifiers and a corresponding 
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password managed by said step (a) but a number which is received from the terminal (2) to- 
present caller telephone number from which gether with the access request 
the access request is made is different from 

the previous caller telephone number. 20. The method as claimed in claim 17 or 18, char- 

5 acterized in that the communication network in- 

13. The method as claimed in claim 12, characterized eludes means for notifying a called end of a tele- 

in that said step (b) permits the access request phone number of a calling end, and said step (b) 

made from the terminal (2) if the access identifier recognizes the present caller telephone number 

and the access password input from the terminal from which the access request is made based a 

match one of the identifiers and the correspond- 10 notification received from the communication 

ing password managed by said step (a). network. 



14. The method as claimed in claim 12 or 13, char- 
acterized in that said step (a) further manages an 
access date and time of each access, and said 15 
step (b) sends at least one of the previous caller 
telephone number and the access date and time 

to the terminal (2) when sending the warning 
message. 

20 

15. The method as claimed in any of claims 12 to 14, 
characterized in that said step (b) recognizes the 
present caller telephone number from which the 
access request is made based on a telephone 
number which is received from the terminal (2) to- 25 
gether with the access request. 

16. The method as claimed in any of claims 12 to 14, 
characterized in that the communication network 
includes means for notifying a called end of a tel- 30 
ephone number of a calling end, and said step (b) 
recognizes the present caller telephone number 
from which the access request is made based a 
notification received from the communication 
network. 35 

17. The method as claimed in claim 12, characterized 
in that said step (a) further manages second 

v passwords in correspondence with each identifi- 
er, and said step (b) requests input of a second 40 
access password to the terminal (2) when send- 
ing the warning message, and rejects the access 
request if the second access password input from 
the terminal is different from a corresponding 
second password managed by said step (a). 45 

18. The method as claimed in claim 17, characterized 
in that said step (a) further manages an access 
date and time of each access, and said step (b) 
sends at feast one of the previous caller tele- so 
phone number and the access date and time to 

the terminal (2) when sending the warning mes- 
sage. 



21. The method as claimed in any of claims 17 to 20, 
which further comprises the step (c) of keeping 
a log of information related to the access request 
which is rejected by said step (b). 

22. The method as claimed in claim 21 , characterized 
in that said step (c) stores in the log information 
including the access identifier used for the reject- 
ed access request, the caller telephone number 
of the rejected access request, and the date and 
time of the rejected access request. 



19. The method as claimed in claim 17 or 18. char- 55 
acterized in that said step (b) recognizes the 
present caller telephone number from which the 
access request is made based on a telephone 
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